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Disposition of Claims 

4) [EI Claim(s) 42-46,48-54, 56, 58-62 and 64-70 is/are pending in the application. 
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This action is in response to the communication filed on 4/1 1/2007. 



2 



DETAILED ACTION 



3 



Response to Arguments 



4 



Applicant's arguments with respect to claims 42-46, 48-54, 56, 58-62, and 64-70 have 



5 



been considered but are moot in view of the new ground(s) of rejection. 



6 



Regarding applicants' argument that Saito did not teach providing information indicative 



7 of receipt of valid digital credential information from the relying party, the examiner does not 

8 find the argument persuasive. Saito teaches that when the certificate is vahd, access control 

9 information of the user includmg ciphered user ID, password, and access level is transmitted 

10 from authentication server 2 to application server 6. Then when the application server verifies 

1 1 the access control information from the authentication server, an accept message is transmitted to 

12 the client. Because the access control information is not sent to the application server if unless 

13 the certificate was determined to be valid, the access control information is therefore "indicative" 

14 of a valid certificate. Similarly, the access control information is not verified by the application 

15 server if the certificate is not vahd, and thus the cUent would not receive the accept message if 

16 the certificate was not valid. As such, the accept message is indicative that the certificate was 

17 valid. Therefore, the examiner does not find the argument persuasive. 

18 All objections and rejections not presented below have been withdrawn. 

19 Claims 42-46, 48-54, 56, 58-62, and 64-70 have been examined. 

20 Information Disclosure Statement 

21 The information disclosure statement (IDS) submitted on 4/17/2007 was filed with the 

22 response to the non-final office action mailed 12/20/2006. The submission is in compliance with 
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1 the provisions of 37 CFR 1.97. Accordingly, the information disclosure statement is being 

2 considered by the examiner. 

3 Specification 

4 The specification is objected to as failing to provide proper antecedent basis for the 

5 claimed subject matter. See 37 CFR l,75(d)(l) and MPEP § 608.01(o). Correction of the 

6 following is required: In this case, the applicant has not pointed out support for a second relying 

7 party, as recited in claims 48, 56, and 64. Further, the examiner has been unable to find support 

8 for this Umitation in the specification as originally filed. See the rejection of claims 48, 56, and 

9 64 under 35 USC 112 1'^ Paragraph below. 

10 Claim Objections 

1 1 Claim 62 is objected to because of the following informalities: Claim 62 recites "the 

12 authentication server" which lacks antecedent basis in the claim. It appears that this should have 

13 been amended to read "the authentication service", as was done to claims 58-65. Appropriate 

14 correction is required . 

15 Claim Rejections - 35 USC §112 

16 The following is a quotation of the first paragraph of 35 U.S. C. 1 12: 

1 7 The specification shall contain a written description of the invention, and of the manner and process of making 

1 8 and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 

1 9 pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 

20 contemplated by the inventor of carrying out his invention. 
21 

22 Claim 48, 56, and 64 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to 

23 comply with the written description requirement. The claim(s) contains subject matter which 

24 was not described in the specification in such a way as to reasonably convey to one skilled in the 

25 relevant art that the inventor(s), at the time the application was filed, had possession of the 
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1 claimed invention. In this case, the applicant has not pointed out support for a second relying 

2 party, as recited in claims 48, 56, and 64. Further, the examiner has been unable to find support 

3 for this limitation in the specification as originally filed. As such, the claims are rejected for . 

4 failing to meet the written description requirement of 35 USC 112 1^ Paragraph. The claims 

5 have been examined in view of the prior art below. 

6 Claim Rejections - 35 USC §103 

7 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

8 obviousness rejections set forth in this Office action: 

9 A patent may not be obtained though the invention is not identically disclosed or 

10 described as set forth in section 102 of this title, if the differences between the subject 

1 1 matter sought to be patented and the prior art are such that the subject matter as a 

12 whole would have been obvious at the time the invention was made to a person having 

13 ordinary skill in the art to which said subject matter pertains. Patentability shall not be 

14 negatived by the manner in which the invention was made. 
15 

16 Claims 42-46, 48-54, 56, 58-62, and 64-70 are rejected under 35 U.S.C. 103(a) as being 

17 unpatentable over Anderson et al. (US Patent Number 6,021,202) hereinafter referred to as 

1 8 Anderson, and further in view of Saito et al. (US Patent Number 6,275,94 1) hereinafter referred 

19 to as Saito. 

20 Regarding claims 42, 50, and 58, Anderson disclosed a machine-implemented method 

21 (See Anderson Fig. 26) comprising: relying on digital credential information (Signature and 

22 digital certificate) associated with a first user (Doctor 462) by a relying party (Third 468) (See 

23 Anderson Fig. 26 and Col. 39 Line 21 - Col. 40 Line 1 1); verifying that the digital credential 

24 information is vaUd using the professional license status information that has been stored for a 

25 plurality of users (See Anderson Col. 1 1 Paragraph 2); and providing information to the first 

26 user, the information indicative of receipt of valid digital credential information from the relying 
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1 party (See Anderson Col. 40 Lines 8-10 and Col. 24 Lines 38-50); wherein the relying party is 

2 distinct from the first user (See Anderson Fig. 26), but Anderson failed to disclose how to verify 

3 the digital credential information, or specifically an authentication service, which receives the 

4 credential information from a relying party, provides the verification information indicative of a 

5 valid professional license status of the first user from to the relying party; or provides the 

6 information indicative of receipt of valid digital credential information from the relying party. 

7 Saito teaches a system for verifying digital credential information including digital 

8 certificates of a user (See Saito Fig. 5 and Col. 7 Lines 5-55) involving an authentication service 

9 (authentication server), receiving digital credential information (integrated certificate) associated 

10 with a first user (client) from a relying party (application server) (See Saito Col 7 Lines 21-24); 

1 1 verifying the digital credential information associated with the first user to the relying party (See 

12 Saito CoL 7 Lines 25-36); providing verification information associated with the first user.to the 

13 relying party (See Saito Col 7 Lines 36-52); and providing information from the authentication 

14 service to the first user, the information indicative of receiving the digital credential information 

15 associated with the first user from the relying party (See Saito Col 7 Lines 36 - Col 8 Line 8). 

16 It would have been obvious to the ordinary person skilled in the art at the time of 

17 invention to employ the teachings of Saito in the network prescription issuing system of 

18 Anderson by utilizing an authentication server as taught by Saito to verify the digital signatures, 

19 digital certificates, and license statuses of Anderson upon the request of one of the relying third 

20 parties. This would have been obvious because one of ordinary skill in the rat would have been 

21 , motivated to provide means for verifying this data as required by Anderson. 
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1 Regarding claims 43, 51, and 59, the combination of Anderson and Saito disclosed 

2 providing access to an activity log associated with the first user (See Anderson Col. 40 Lines 8- 

3 10 and Col. 24 Lines 38-50 and further see Saito Col. 8 Lines 3-5 and 36-44). 

4 Regarding claims 44-45, 52-53, and 60-61, the combination of Anderson and Saito 

5 disclosed that the professional license status information comprises registration information 



6 indicative of a professional license registration status with a registration authority (See Anderson 

7 Col 1 1 Paragraph 2), and the method further comprises, prior to providing the verification 

8 information to the relying party, verifying the registration information with the registration 

9 authority (See Anderson Col. 1 1 Paragraph 2 and the rejection of claim 42 above). 



10 Regarding claims 46, 54, and 62, the combination of Anderson and Saito disclosed 

1 1 storing access information associated with the relying party, the access information including 

12 information indicative of the providing the verification information (See Saito Col. 7 Lines 44- 

13 52); and providing the access information to the relying party (See Saito Col. 7 Lines 44-52). 

14 Regarding claims 48, 56, and 64, the combination of Anderson and Saito disclosed 

1 5 providing information indicative of a failure to authenticate the digital credential information 

16 associated with the first user to a second relying party (See Saito Col. 7 Lines 36-38 and 

17 Anderson Fig. 26). 

18 Regarding claims 49, and 65, the combination of Anderson and Saito disclosed at least 

19 one of the relyiiig party and the authentication service issuing a challenge in response to 

20 receiving digital credential information associated with the first user (See Saito Col. 7 Lines 21- 

21 24). 
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1 Regarding claim 66, the combination of Anderson and Saito disclosed receiving, at the 

2 relying party, the valid digital credential information from an unauthorized user (See Anderson 

3 Col. 27 Paragraph 4 wherein it is implied that not all of the uses of the signature card are 

4 necessarily legitimate and as such it is obvious that an unauthorized user could have used it to 

5 provide the signature credentials), 

6 Regarding claims 67-69, the combination of Anderson and Saito disclosed that the 

7 information is provided from the authentication service to the fu^st user in response to receipt of 



8 the valid digital credential information from an unauthorized user (See Anderson Col. 27 

9 Paragraph 4 wherein it is implied that not all of the uses of the signature card are necessarily 
10 legitimate and as such it is obvious that an unauthorized user could have used it to provide the 



1 1 signature credentials). 

12 Regarding claim 70, the combination of Anderson and Saito disclosed that a relying party 

13 configured to receive the digital credential information associated with the first user and relay it 

14 to the authentication service (See Saito Col. 7 Lines 10-24 and the rejection of claim 42 above). 

1 5 Conclusion 

16 Claims 42-46, 48-54, 56, 58-62, and 64-70 have been rejected. 

17 THIS ACTION IS MADE FINAL. Apphcant is reminded of the extension of time 

18 poHcy as set forth in 37 CFR 1.136(a). 

19 A shortened statutory period for reply to this final action is set to expire THREE 

20 MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 

21 MONTHS of the mailing date of this final action and the advisory action is not mailed until after 

22 the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
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1 will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 

2 CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 

3 however, will the statutory period for reply expire later than SIX MONTHS from the mailing 

4 date of this final action. 

5 Any inquiry concerning this communication or earlier communications from the 

6 examiner should be directed to Matthew T. Heiming whose telephone number is (571) 272-3790. 

7 The examiner can normally be reached on M-F 8-4. 

8 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

9 supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 

10 organization where this application or proceeding is assigned is 571-273-8300. 

1 1 Information regarding the status of an application may be obtained from the Patent 

12 Application Information Retrieval (PAIR) system. Status information for published applications 

13 may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

14 applications is available through Private PAIR only. For more information about the PAIR 

15 system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

1 6 system, contact the Electronic Business Center (EBC) at 866-2 1 7-9 1 97 (toll-free). 
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Assistant Examiner 
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